CVE-2026-123096

The anacrolix/torrent client (versions through 1.61.0 ) is vulnerable to a memory exhaustion flaw located in the tracker/http package. The root cause is that the Client.Announce and Client.Scrape functions buffer responses without sufficient limits. Consequently, a malicious HTTP tracker—referenc...